We help get counsellors & therapists found by AI: a free visibility scan, your own AI-optimised website, and a place in our directory. Start with your free scan

Privacy Policy

Version 2026-07-13

Controller

TheraFound, currently operated by Andrew Repton, based in London, United Kingdom (and in the process of incorporating as a UK limited company). Contact: catherine@therafound.co.uk. UK GDPR applies.

What we collect and why

  • Account data (email, name, practice details you enter): to create your account, run your scan, deliver reports and provide the service. Lawful basis: contract.
  • Terms-acceptance records (version, timestamp, IP): to evidence your agreement. Lawful basis: legitimate interests / legal obligation.
  • Scan inputs and results: your details are sent to third-party AI providers (via OpenRouter, to OpenAI, Anthropic, Google and Perplexity models) solely to generate your report. Full free-scan reports are retained 30 days; your visibility score is kept as a baseline (and, for members, tracked over time) to show progress; member reports for the life of the account. Lawful basis: contract.
  • Website audit fetches: if you submit a URL, we fetch that publicly available page to analyse it. Lawful basis: contract.
  • Directory profiles from public sources: we create unclaimed profiles for practitioners from publicly available professional information (e.g. public registers, public practice listings). Lawful basis: legitimate interests, namely helping the public find registered practitioners and helping practitioners manage their AI visibility. Any practitioner may claim, correct, or request removal of their profile at any time via catherine@therafound.co.uk; removal requests are honoured within 14 days.
  • Marketing email: only with your consent (the optional checkbox at sign-up) or where PECR's soft opt-in applies to existing customers. Every message includes one-click unsubscribe. Lawful basis: consent.
  • Payments: handled by Stripe; we never store card details. Cookies: an essential signed session cookie and a region-preference cookie only; no advertising trackers.

Sharing

Service providers under contract: hosting (Vercel), data store (Upstash), email (Resend), payments (Stripe), AI gateways/models (OpenRouter and the model providers named above). Some of these providers process data outside the UK; where they do, the transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. We do not sell personal data.

Your rights

Access, rectification, erasure, restriction, portability, objection, and complaint to the ICO (ico.org.uk). Contact: catherine@therafound.co.uk. Retention: account data for the life of the account plus 6 months; leads that never verify are deleted after 90 days.

Last updated 2026-07-13. To exercise any of your rights or ask a question, email catherine@therafound.co.uk.